Mozilla yesterday patched 10 bugs in Firefox, half of them critical, in the
Firefox 3.5.6, the browser’s first security update since late October, fixed
five flaws rated critical by Mozilla, one tagged as high, three pegged as
moderate, and one labeled as a low threat. The five critical vulnerabilities
and "libtheora" media and video libraries.
"Some of these crashes showed evidence of memory corruption under certain
circumstances and we presume that with enough effort at least some of these
could be exploited to run arbitrary code," Mozilla said in the advisory that